Race Condition in Linux Kernel Affecting Action Lifecycle Management

CVE-2026-53264

What is CVE-2026-53264?

A race condition vulnerability exists in the Linux kernel that can arise when the NEWTFILTER and DELFILTER actions are executed concurrently. This flaw may lead to a use-after-free (UAF) scenario, resulting in system instability or potential exploitation. The issue was addressed by modifying the action lifecycle management to incorporate deferred freeing, ensuring actions are not immediately deallocated while still being referenced. This enhancement utilizes RCU (Read-Copy-Update) to protect the actions, preventing memory corruption and safeguarding system integrity.

References